Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-49262 |
low | 3.0 | 0.0017 | 2026-08-12 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy ro | |
CVE-2026-68927 |
low | 3.0 | 0.0033 | 2026-08-18 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities i | |
CVE-2026-52840 |
low | 2.7 | 0.0023 | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. In versions prior to 1.6.0, `Caldav::conne | |
CVE-2026-93848 |
low | 2.7 | 0.0029 | 2026-10-26 | Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the Op | |
CVE-2026-110805 |
low | 2.6 | 0.0012 | 2026-10-16 | Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier | |
CVE-2026-44515 |
low | 2.3 | 0.0019 | 2026-05-14 | Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticat | |
CVE-2026-46497 |
low | 2.3 | 0.0029 | 2026-06-10 | Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0 | |
CVE-2026-62216 |
low | 2.3 | 0.0029 | 2026-07-17 | OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A low | |
CVE-2026-73087 |
low | 2.3 | 0.0046 | 2026-08-11 | Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SS | |
CVE-2026-115752 |
low | 2.3 | 0.0018 | 2026-10-23 | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerabilit | |
CVE-2026-41321 |
low | 2.2 | 0.0024 | 2026-04-24 | @astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13.1.10, the | |
CVE-2025-15098 |
low | 2.1 | 0.0030 | 2025-12-26 | A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHtt | |
CVE-2026-5259 |
low | 2.1 | 0.0021 | 2026-04-01 | A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unk | |
CVE-2026-6111 |
low | 2.1 | 0.0026 | 2026-04-12 | A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the functi | |
CVE-2026-6119 |
low | 2.1 | 0.0026 | 2026-04-12 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the func | |
CVE-2026-6497 |
low | 2.1 | 0.0027 | 2026-04-17 | A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerabil | |
CVE-2026-6587 |
low | 2.1 | 0.0028 | 2026-04-20 | A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the | |
CVE-2026-6616 |
low | 2.1 | 0.0022 | 2026-04-20 | A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects | |
CVE-2026-6617 |
low | 2.1 | 0.0020 | 2026-04-20 | A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function | |
CVE-2026-6618 |
low | 2.1 | 0.0021 | 2026-04-20 | A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_ | |
CVE-2026-6649 |
low | 2.1 | 0.0021 | 2026-04-20 | A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality | |
CVE-2026-6979 |
low | 2.1 | 0.0025 | 2026-04-25 | A flaw has been found in devlikeapro WAHA up to 2026.3.4. This affects an unknown function of the fi | |
CVE-2026-6981 |
low | 2.1 | 0.0025 | 2026-04-25 | A vulnerability was found in IhateCreatingUserNames2 AiraHub2 up to 3e4b77fd7d48ed811ffe5b8d222068c1 | |
CVE-2026-7084 |
low | 2.1 | 0.0026 | 2026-04-27 | A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1. This affects the function fetch of t | |
CVE-2026-7150 |
low | 2.1 | 0.0020 | 2026-04-27 | A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b. Thi | |
CVE-2026-7729 |
low | 2.1 | 0.0021 | 2026-05-04 | A security flaw has been discovered in pixelsock directus-mcp 1.0.0. This issue affects the function | |
CVE-2026-8081 |
low | 2.1 | 0.0022 | 2026-05-07 | A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some u | |
CVE-2026-44428 |
low | 2.1 | 0.0022 | 2026-05-14 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. | |
CVE-2026-12774 |
low | 2.1 | 0.0040 | 2026-06-21 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnera | |
CVE-2026-12798 |
low | 2.1 | 0.0040 | 2026-06-21 | A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is th | |
CVE-2026-14748 |
low | 2.1 | 0.0028 | 2026-07-05 | A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab | |
CVE-2026-15317 |
low | 2.1 | 0.0043 | 2026-07-10 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability i | |
CVE-2026-15500 |
low | 2.1 | 0.0037 | 2026-07-12 | A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this vulnerability i | |
CVE-2026-15501 |
low | 2.1 | 0.0035 | 2026-07-12 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this iss | |
CVE-2026-15508 |
low | 2.1 | 0.0035 | 2026-07-12 | A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_ta | |
CVE-2026-15525 |
low | 2.1 | 0.0037 | 2026-07-13 | A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _v | |
CVE-2026-15619 |
low | 2.1 | 0.0043 | 2026-07-14 | A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function | |
CVE-2026-15620 |
low | 2.1 | 0.0040 | 2026-07-14 | A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the functio | |
CVE-2026-15624 |
low | 2.1 | 0.0037 | 2026-07-14 | A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerabil | |
CVE-2026-15628 |
low | 2.1 | 0.0037 | 2026-07-14 | A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue a | |
CVE-2026-15668 |
low | 2.1 | 0.0040 | 2026-07-14 | A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the funct | |
CVE-2026-15750 |
low | 2.1 | 0.0040 | 2026-07-14 | A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the fu | |
CVE-2026-48978 |
low | 2.1 | 0.0021 | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm UR | |
CVE-2026-16074 |
low | 2.1 | 0.0035 | 2026-07-17 | A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function update_p | |
CVE-2026-16124 |
low | 2.1 | 0.0046 | 2026-07-18 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This aff | |
CVE-2026-16194 |
low | 2.1 | 0.0046 | 2026-07-18 | A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch. | |
CVE-2026-16196 |
low | 2.1 | 0.0041 | 2026-07-18 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrR | |
CVE-2026-16222 |
low | 2.1 | 0.0037 | 2026-07-19 | A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown proce | |
CVE-2026-16223 |
low | 2.1 | 0.0037 | 2026-07-19 | A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlB | |
CVE-2026-17458 |
low | 2.1 | 0.0040 | 2026-07-26 | A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlay |